question

AllieJustice-9003 avatar image
0 Votes"
AllieJustice-9003 asked HannahXiong-MSFT commented

Global Catalog Issue

Our domain has 4 sites in Active Directory environment. Has had 4 domain controllers in Active Directory environment. 1 DC-used to be primary domain controller. Roles transferred while DC in operation to #4. Afterwards, DC demoted, etc the right way. New server created to replace 1, same IP address. Added to domain about 3 months ago. 2 DC-crashed a couple of years ago. Recently removed from Active Directory Sites and Services. About 2 weeks ago. 3 DC-has been running since domain created. Gives no problems. 4 DC-new. Created about 6 months ago. Roles from #1 transferred to this one to make it the primary.

A new project has brought to light that both 1 & 4 are not advertising as Global Catalog Servers. This is the part I could use help with.

C:\Users\administrator>repadmin /replsum
Replication Summary Start Time: 2021-07-28 08:49:04

Source DSA largest delta fails/total %% error
1 08m:55s 0 / 5 0
3 14m:54s 0 / 10 0
4 14m:54s 0 / 10 0

Destination DSA largest delta fails/total %% error
4 14m:54s 0 / 10 0
3 07m:57s 0 / 5 0
1 08m:55s 0 / 10 0


C:\Users\>repadmin /showconn

Repadmin: running command /showconn against full DC localhost
Base DN:
==== KCC CONNECTION OBJECTS ============================================
Connection --
Connection name :
Server DNS name :
Server DN name :
Source: 4
No Failures.
TransportType: IP
options: isGenerated overrideNotifyDefault
ReplicatesNC: DC=DomainDnsZones,
Reason: IntersiteTopology
Replica link has been added.
ReplicatesNC: DC=ForestDnsZones,
Reason: IntersiteTopology
Replica link has been added.
ReplicatesNC:
Reason: IntersiteTopology
Replica link has been added.
ReplicatesNC: CN=Configuration,
Reason: IntersiteTopology
Replica link has been added.
Connection --
Connection name :
Server DNS name :
Server DN name :
Source: 3
1 CONSECUTIVE FAILURES since 2021-07-28 08:37:40
Last error: 8464 (0x2110):
Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set.
TransportType: IP
options: isGenerated overrideNotifyDefault
ReplicatesNC: DC=4
Reason: GCTopology IntersiteTopology
WARNING: KCC could not add this REPLICA LINK due to error.
ReplicatesNC: DC=ForestDnsZones,
Reason: GCTopology IntersiteTopology
Replica link has been added.
ReplicatesNC:
Reason: GCTopology IntersiteTopology
Replica link has been added.
ReplicatesNC: DC=DomainDnsZones
Reason: GCTopology IntersiteTopology
Replica link has been added.
ReplicatesNC: CN=Configuration
Reason: GCTopology IntersiteTopology
Replica link has been added.
2 connections found.

C:\Users\>repadmin /showrepl

Repadmin: running command /showrepl against full DC localhost
4
DSA Options: IS_GC
WARNING: Not advertising as a global catalog.
Site Options: (none)
DSA object GUID:
DSA invocationID:

==== INBOUND NEIGHBORS ======================================

DC=
1- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.
3- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.

CN=Configuration,
1- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.
3- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.

CN=Schema,CN=Configuration,
1- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.
3- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.

DC=DomainDnsZones,
1- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.
3-via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.

DC=ForestDnsZones,
1- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.
3- via RPC
DSA object GUID:
Last attempt @ 2021-07-28 08:04:10 was successful.

Source: 3-
*** 1 CONSECUTIVE FAILURES since 2021-07-28 07:51:04
Last error: 8464 (0x2110):
Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set.

Naming Context: DC=4
Source: 3
*** WARNING: KCC could not add this REPLICA LINK due to error.

Since 1 & 4 replication commands both balk at 3, I'm thinking there's something with 3. Any advice?

windows-server
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @AllieJustice-9003,

Thanks for posting here.

We are checking in to see if the provided information is helpful. If the reply is helpful, we would greatly appreciate it if you would accept it as answer.

Please let us know if you would like further assistance. Thanks.

Best regards,
Hannah Xiong

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered

You can follow along here.
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8464

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ITPro-3707 avatar image
0 Votes"
ITPro-3707 answered ITPro-3707 published

Have you tried rebooting, I normally try that first. Hope that helps!!

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.